CVE-2001-0148
The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability.
- EPSS
- 27% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- microsoft:windows_media_player
References
- http://archives.neohapsis.com/archives/bugtraq/2001-01/0000.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6227
- http://archives.neohapsis.com/archives/bugtraq/2001-01/0000.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-015